LogScale Cloud Administration
Once Falcon LogScale software is installed and running, there isn't much to do beyond querying and managing the data. However, as an administrator, you'll want to monitor users, their usage and ensure you're in compliance with your licensing limitations.
Although you may have been careful in designating users and setting permissions, you may want to monitor their activities — in particular their queries. This section provides information on how to monitor and even block some queries.
LogScale primarily records your server logs. However, it can be useful to log information on the activities of LogScale itself. This section describes how to do that.
In addition to server logs and metrics sent to it, LogScale records all of its activities: user logins – and failed logins; the IP address of clients that viewed dashboards; etc. This section provides details on these internal logs, on this special repository.
Since there's always the threat of unauthorized access to LogScale or just inadvertent server problems, you should replicate LogScale's logs on another server running LogScale. That way you can determine who and what went wrong if your primary LogScale installation is hacked or deleted.
You can start using LogScale with a trial license, but eventually you'll need to purchase a license. These sections provide information on managing a license.
The Falcon LogScale Cloud license is based on usage, the amount of data ingested. This section provides information on how usage is calculated and how to control usage — and eliminate unnecessary usage.